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ABSTRACT 

In  this  paper  we  present  an  application  of  fault  identification  and  control 
reconfiguration  in  the  context  of  a  high  performance  aircraft.  A  second  order 
divided  difference  filter  is  used  to  identify  an  internal  leakage  fault  in  an  electro- 
hydraulic  actuator  found  in  the  aircraft  elevator.  The  identified  fault  information  is 
then  utilized  in  the  formulation  of  an  aircraft  systems  model  for  prognosis-based 
control.  An  optimization  based  reconfiguration  strategy  is  presented  to  minimize 
degradation  of  the  fault  in  presence  of  performance,  actuation,  and  mission 
constraints.  The  strategy  is  then  validated  through  Hardware-in-the-Loop 
Simulations. 


INTRODUCTION 

Modem  technological  systems  rely  heavily  on  sophisticated  control  systems  to 
meet  increased  safety  and  performance  demands.  This  reliance  on  control  is 
particularly  prevalent  in  safety  critical  applications,  such  as  spacecraft,  aircraft, 
nuclear  power  plants,  chemical  plants  processing  hazardous  materials  etc.,  where 
unattended  and  minor  faults  could  potentially  develop  into  catastrophic  failures  if 
maintenance  is  not  performed  in  a  timely  and  proper  manner.  By  compensating  for 
faults  to  some  degree,  conventional  closed  loop  feedback  control  design  for  a 
process  plant  or  air  vehicle  system  may  prevent  that  fault  from  being  observed  and 
will  eventually  develop  into  a  control  loop  malfunction  resulting  in  unsatisfactory 
performance  (even  instability).  Hence,  there  is  a  requirement  to  identify  the  faults 
as  soon  as  they  occur  and  modify  the  control  strategy  to  ensure  stability  and 
performance  [1]. 

Most  of  the  existing  research  in  the  literature  is  centered  around  the  objective  of 
recovering  as  much  of  the  pre-fault  system  performance  as  possible  [2],  Some  of 
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these  approaches  assume  total  failure  of  the  subsystem  (actuator,  sensor  etc.)  and 
then  take  one  of  two  actions:  (a)  replace  the  failed  components  by  their  analytical  or 
physical  redundant  counterparts,  or  (b)  completely  remove  the  failed  components 
from  the  plant  model.  If  the  design  objective  is  to  restore  the  original  performance 
of  the  system  given  faults  in  the  subsystem  components  as  stated  above,  then  an 
unsustainable  level  of  performance  may  be  required  from  other  (healthy) 
subsystems.  This  type  of  reconfiguration  is  not  optimal  because  extreme 
performance  requirements  may  further  damage  the  system,  and  a  faulty  actuator 
may  still  be  able  to  provide  useful  function.  Some  authors  (e.g.  Zhang  et  al.  [3]) 
have  considered  the  problem  of  reconfiguration  of  a  partially  operational  actuator; 
however,  there  is  a  lack  of  analysis  in  the  literature  on  the  effect  of  reconfiguration 
on  the  faulty  actuator.  In  other  words,  there  is  no  analysis  on  the  rate  of 
degradation  of  the  actuator  due  to  modified  actuation  demands  as  a  result  of  the 
reconfiguration. 


APPROACH 

The  block  diagram  of  the  proposed  approach  is  shown  in  Figure  1.  The  plant 
contains  the  models  for  the  aircraft  and  the  actuator.  The  controller  provides  signals 
to  the  actuator  in  order  to  achieve  objectives  set  by  the  mission  planner.  Faults  in 
aircraft  such  as  hydraulic  actuators  are  identified  by  the  fault  identification  block. 
The  prognosis  module  gives  information  about  how  the  fault  will  progress  based  on 
the  current  degradation  level  and  the  mission  profile.  This  prognosis  information  is 
then  used  by  the  controller  reconfiguration  and  flight  path  optimizer  to  minimize 
degradation  while  achieving  the  best  possible  performance. 


Figure  1:  Approach 


MODELS 

This  section  gives  a  brief  description  of  the  models  used  in  the  modeling 
environment.  A  full  nonlinear  6  d.o.f.  model  of  a  high  performance  aircraft  is 
developed  using  Simulink.  This  model  is  then  linearized  about  an  operating  point  of 


1 0000 y?  altitude  and  500//7  s  velocity  to  obtain  a  simplified  aircraft  model  in  the 
longitudinal  plane. 


x  =  Ax  +  Bu  x  =  (h  6  v,  a  q ) 
y  =  Cx  u  =  (d,  $e) 


(1) 


where  h  is  the  altitude,  0  is  the  pitch,  v,  is  the  velocity,  a  is  the  angle  of  attack,  q 
is  the  pitch  rate,  St  is  the  thrust,  and  8e  is  the  elevator  deflection.  This  model  is 

connected  to  a  simple  first  order  model  for  thrust  and  a  nonlinear  hydraulic  actuator 
model  as  given  in  Eq.(2)  with  internal  leakage: 

mxl  =PtA- bx,  -  Ffc (x, )  +  f(t, x,,x,) 
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where  xL  is  the  displacement  of  the  piston,  PL=P{-P2  is  the  load  pressure  of  the 
cylinder,  A  is  the  ram  area  of  the  cylinder,  F  represents  the  modeled  Coulomb 
friction  force,  /  represents  the  external  disturbances  such  as  unmodeled  friction 
forces,  Ctm  represents  the  coefficient  of  the  total  internal  leakage  of  the  cylinder,  xv 
is  the  displacement  of  the  spool  of  the  directional  proportional  valve,  QL  is  the  load 


flow.  More  details  on  the  terms  in  the  dynamics  equations  can  be  found  in  [4],  FL 
represents  the  aerodynamic  forces  acting  on  the  actuator  and  are  calculated  as  [5]: 

F,=2KLqCh(a,S)M’(M,S )  (3) 

Ch  is  the  nonlinear  hinge  coefficient  which  depends  on  a  and  the  control  surface 
deflection  5.  q  is  the  dynamics  pressure  and  Mis  the  mach  number.  The 
degradation  model  is  an  empirical  model  for  the  wear  rate  of  a  PTFE  material  seal. 
It  is  given  as: 

g  =f(x.)  mm3/N/m 

&r  J  \  U  (4) 

w  =  g  d.F,  a,  ,  w 

r  or  l  L  leak  r 


CONTROL 


The  aircraft  control  structure  has  two  main  loops:  the  velocity  loop  and  the 
altitude  loop.  The  velocity  loop  is  controlled  with  a  simple  lead  compensator  where 
as  the  altitude  loop  is  controlled  using  a  cascaded  PI  control  with  stability 
augmentation  and  angle  of  attack  feedback: 
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The  position  control  for  the  actuator  is  achieved  by  generating  a  reference  force 
trajectory  based  on  the  reference  position  trajectory.  A  Lyapunov  based  control 
design  is  then  used  to  develop  a  control  structure  to  track  the  reference  force 
trajectory.  The  reference  force  trajectory  and  the  control  input  are  given  in  Eq.  (6): 


Fd=mxd  -KJk,  -xl)-KrJxl -xd)  +  Ffc 
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RESULTS  AND  CONCLUSION 


Fault  Identification 


The  states  and  the  internal  leakage  fault  in  the  hydraulic  actuator  are  identified 
using  a  second  order  divided  difference  filter  (DDF)  [6],  The  discrete  form  of  the 
actuator  equations  are  given  in  Eq.  (7): 

x,  (k  + 1)  =  x,  ( k )  +  Tx2  ( k )  +  V,  ( k ) 

x2 (k  + 1)  =  x2  ( k )  +  T6X  (x3  ( k )  -  &x2  (k)  -  Ffc )  +  #2  +  x6 ( k )  +  v2  ( k ) 


x3(k  + 1)  =  x3 (k)  +  T^3[- Ax2 ( k ) - x5 (k)Jx3 (k)  sgn(x3(k)) 
+  ^F-^gn(x4(k))x,(k)x4  (k))]  +  v3  (k) 
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x5  {k  + 1)  =  x5  ( k )  +  v5  (^) 


x6(k  +  l)  =  x6(k)  +  v6(k) 

where  x,,...,x4  are  states  (position,  velocity,  load  pressure  and  spool  position),  x5 
is  the  parameter  appended  as  a  state  for  unknown  internal  leakage  fault  and  x6  is 
the  appended  state  for  estimating  friction.  Vector  v(k)  is  the  process  noise 
covariance.  It  is  important  to  estimate  friction  online  because  of  the  large 
uncertainty  associated  with  offline  friction  estimation.  Adding  the  friction 
parameter  improves  the  estimation  accuracy  significantly.  The  process  covariance, 
measurement  noise  covariance  and  the  initial  state  estimate  variance  used  for  the 
estimation  and  fault  identification  are  as  follows: 

Q  =  diag([lxl0~2  lxl(T2  1  1x10  2  6xl0-6  l]) 

R  =  diag([lxl0”6  lxlO-2  lxlO7  lxlO-2])  (8) 

P  =  diag(lxl02  [l  11111]) 

Figure  2(a)  shows  the  results  of  fault  identification  with  step  changes  in  the  leakage 
levels.  The  actual  measured  flow  rate  is  shown  in  Figure  2(b).  As  can  be  seen,  very 
small  leakage  rates  are  difficult  to  identify.  However,  as  leakage  becomes  greater 
than  .01  Itrs  /  s  the  fault  levels  are  distinctly  identified  with  a  constant  ratio  between 
the  voltage  to  the  leakage  valve  and  the  identified  coefficient. 


Reconfiguration  for  Life  Extension 

After  the  aircraft  and  the  actuator  models  are  combined,  the  gains  of  the  aircraft 
controller  are  tuned  through  optimizing  the  following  objective  function  with 
constraints: 
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Figure  2:  Fault  identification  for  step  changes  in  the  leakage  level  and  measured  v/s  estimated  flow 

rate 
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(10) 


where  wr  is  the  degradation  of  the  actuator,  tf  is  the  final  time,  ey  is  the  output 
error.  Eq.  (10)  includes  constraints  on  degradation  level,  time  domain  constraints 
such  as  rise  time  tr ,  settling  time  ts ,  maximum  overshoot  mp  etc.  The  first  half  of 

the  objective  function  as  given  in  Eq.(9)  ensures  that  the  degradation  at  the  end  of 
the  mission  is  minimized  and  the  second  part  ensures  that  the  system  follows  the 
trajectory  as  closely  as  possible.  Using  this  objective  function,  it  is  possible  to 
generate  a  trade-off  between  the  degradation  level  and  the  maximum  performance 
attainable.  The  reconfiguration  supervisor  uses  a  mixed  integer  programming 
optimization  strategy  to  find  the  best  possible  response  while  keeping  the 
degradation  for  a  particular  mission  below  a  pre-specified  level.  This  can  also  be 
interpreted  as  minimizing  the  degradation  given  the  mission  and  performance 
constraints.  This  is  achieved  using  the  following  objective  function: 


Yl 
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(11) 


subject  to  wr(tf)  <  wrcommanded 

The  optimization  minimizes  the  sum  of  rise  times  (performance)  of  the  step 
response  of  the  aircraft.  This  optimization  is  also  performed  over  the  number  of 
steps  in  the  trajectory  (assuming  that  the  trajectory  is  supplied  in  terms  of  step 
changes  in  altitude  for  a  longitudinal  aircraft  model). 

The  step  response  is  used  as  a  performance  measure  in  this  case  so  that  the 
aircraft  can  get  to  the  desired  altitude  as  fast  as  possible.  This  measure  gives  a 
buffer  in  case  there  is  fault  allowing  more  time  to  get  to  the  desired  waypoint. 
Figure  3  shows  the  response  of  the  system  before  and  after  reconfiguration. 
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Figure  3:  Response  before  and  after  reconfiguration 


The  reconfiguration  strategy  modifies  the  waypoint  map  by  adding  two 
additional  waypoints  -  one  between  original  waypoints  1  and  2;  and  the  second 
between  original  waypoints  2  and  3.  Further  the  performance  times  for  the  entire 
mission  profile  were  modified  as  given  in  Table  1.  This  results  in  reduction  in 
degradation  by  almost  a  factor  of  2  as  seen  in  Figure  3  within  first  350s  of  the 
experiment. 


Table  1 :  Reference  and  response  before  and  after  reconfiguration 
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